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Amendments to the Claims 

This listing of claims will replace all prior versions and listings of claims in the application; 
l-'ft'np of claims: 

1-11. (cancelled) 

12. (currently amended) A method for verifying a signature for a message m in a data 
communication system established between a sender and a Feeieient verifier, said sender 
generating havin g generated in a secu re computer system a masked signature oomponcnt a fc - g, - 
^wto havin g a first signature component r is an integer derived from a coordinate of 
com puted using a first short term public key [[kP,]] derived from a first short term private key; a 
ftft cnnd signature component s io a aignaturo component derived by binding computed using a 
second short term private key[[, the]] on said message m„ aa d short and long t e rm private koyo, 
and a lone term private kev. and said first signature comp onent r: and a third signature 
component c i s a s e cond signatur e component obtained by combining computed using said first 
and second short term private keys, said method for verifying comprising thestopa of a said 
verifier: 

a) obtaining a pair of signature components (j, r) , soid component -s- being deriv e d 

from 3tlH fiflt nrH nipintiir* rnmpnnnntn ganonitod by a nignor a regular 

signature derived from said masked signature (r. s. cV said regular signature 
having said first signature co mponent r. and another signature component s_ 
computed using said second signature c omponent s and said third signature 
component c : 

b) recovering a coordinate pair (x^*) corrcaponding to said first short term publio 
Iray IcP uning said pair (s,r) and point on an ellipt i c curve defined over a finite 
field using said message m and said another signatu re component s_. 

c) converting an element of said point to an integer: 

[[c)]]dj[ calculating a signature component value r 1 fr om one of said coordinate pair 
using said integer : and 
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[[d)]]gi verifying said regular signature (r,J) if said value f [[=]] is equal )fl _ ga id 
first signature component r. 

1 3 . (currently amended) A method according to claim 1 2 further comprising the step of said 
verifier receiving m 4 masked signature (r, s, c) from said sigfief gender and converting (a, r, o) 
(t. s. c) to obtain said pair (s,r) repular signature (r,s). 



14. (currently amended) A method according to claim 12 further comprising the step of said 
signer sender converting si i(i masked signature (s, r, o) fr, y, c) to said pair (s,r) re g ular . 
signature (r, s) and said signer sender sending said pair (s, r) regular signature (r,J) to said 

verifier. 

15. (currently amended) A method according to claim 1 2 wherein said coordinate pair (x^ ) 
point is calculated using a pair of values u and v, said values « and v derived from said pair (s,r) 
regular signature (r, s) and said message m. 

16. (currently amended) A method according to claim 1 5 wherein said coordinate pair (x «yt) 
point is calculated as (xi,yi) = uP + \Q, wherein P is a point on an elliptic curve E and Q is a 
public verification key of said signer- sender derived from P as Q - dP. 

17. (previously presented) A method according to claim 1 5 wherein said value u is computed 
as u = s' l e mod n and said value v is computed as v = s~ x r mod n , e being a representation of 
said message m. 

18. (currently amended) A method according to claim 17 wherein e is calculated as e = H(m), 
H( ) being a hash function of said signe* sender and being known to said verifier. 

19. (currently amended) A method according to claim 12 wherein [[said]] a coordinate xi sf 
said point is first converted to an integer 3c, prior to calculating said component r' . 
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20. (previously presented) A method according to claim 19 wherein said component r' is 
calculated as r'= x, mod n . 

21 . (currently amended) A method according to claim 1 2 wherein prior to calculating said 
component r' , [[said]] a coordinate pair (xi.yi) of said point is first verified, whereby if said 
coordinate pair (xi.yi) is a point at infinity, then said regular signature (r,s) is rejected. 
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